similar to: New Mailing List

Hello, Mike Noyes and myself have populated http://wiki.rettc.com with the shorewall FAQ. This wiki is running MediaWiki, http://www.mediawiki.org. Currently, a couple items are not complete. I have just begun a heavy semester of mathematics/physics studies, and do not have much time to give to this. But, it is online, and seems to be stable. I will keep an eye out for abuse, and limit

Hello, I have forwarded this to the shorewall-users list. You will find better support for this obscure problem there. Regards, Alex Martin http://www.rettc.com Cristian Valentin Barean wrote: > Hello ! > My name is Barean Cristian, and I have a network of 35 users, on a > Linux Mandrake 9.2 server. > As I was adding more users in my network, I found a problem with

Hello, In reference to http://wiki.rettc.com/wiki.phtml?title=Wiki_Shorewall_FAQ ; Well, after a lot of emails I setup a wiki for shorewall, etc. It has proved to be completely useless. I have noticed one slight distro specific example added, a couple typo additions and fixes, otherwise, all contributions have been in excess (Tom...), or in malign. For my uses it has proven of little use as

It has been asserted that the use of CVS for maintaining the Shorewall documentation has been a barrier to community participation. To test this theory, Alex Martin has created a Wiki (http://wiki.rettc.com/wiki.phtml?title=Wiki_Shorewall_FAQ) and with the help of Mike Noyes Alex has populated the Wiki with the Shorewall FAQ. Feedback is welcome. -Tom -- Tom Eastep \ Nothing is foolproof to a

Does anyone know of a script that can act as a "helper" for Shorewall''s dynamic blacklist capabilities? Briefly said, I''d like to know if someone already wrote a script/program that, e.g., parses log files (/var/log/messages, etc) and picks up for example all IP addresses that failed SSH login more than X times and then executes a command such as shorewall drop

Hello I am looking for a way to have snort to dynamically update my shorewall config. I have seen software out there but I would like to see if anyone had tried this first. Aslo I would like to know if there is a way clear the Netfilter tables when I do a shorewall restart. The reason being is that when I make a change to my firewall setting I want all connections to have to re-establish

We''ve just upgraded to a new firewall machine, and a new version of Shorewall. We''re now on 2.04; previous version was 1.3.9b (!). So I''m pretty sure whatever problems we''re having are related to the big version jump. We''re using config files that exactly match our old (working) configuration (IOW, these are things which _were_ working on the old

1 small question i have 4 network cards on my firewall eth0 inet eth1 internel network eth2 customer network eth3 freeswan vpn is there a way that i can connect the eth2 and eth1 network together so that i can access the servers off eth1 from eth2? Marshal McInnis Tech / Web Designs 1-205-344-4455 Ext 208

Hiya, > Ok with me -- if I get too frustrated with DocBook, I''ll just start > editing the HTML again. > > -Tom > Well the fact that VIM is supported by Docbook is a plus .. But I still think the Wiki idea is well .. Lets get the doc at a CVS and Docbook stage .. Walking before running .. plz plz .. Francesca PS: I have thrown Windoze out the Window here (Pardon The

I have an "old and decrepit" install of Shorewall, installed from a Debian package. I''m having a problem, so in order to get support, I''m working on upgrading to the most recent stable version. What I''d like to do, is to test the new version with my configuration files, without actually installing it -- just untarring it. Is this possible? How can I

Hello, I have the go ahead to fix documentation. For starters I will clean all extraneous crap from the markup. Then fix any errors and typos. If anyone sees any gramatical errors or typos or needed clarifications or expansions or whatever, please post them here. Or additional FAQ entries, etc, all will be considered. I hope to keep most of this conversation on the shorewall-devel list. Any

Shorewall 1.4.9 is now available. http://shorewall.net/pub/shorewall/shorewall-1.4.9 ftp://shorewall.net/pub/shorewall/shorewall-1.4.9 Unless something urgent comes up, this will be the last release of Shorewall 1.x. Release notes are attached. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \

I have a shorewall 2.0.14 running on a single interface machine (nwww in the log below) that is attempting to be well screwed down. The policy file reads:- #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST fw net DROP info net all DROP info # The FOLLOWING POLICY MUST BE LAST all all

Hi, Summary of problem: Local mail on the firewall stopped working after installing shorewall Background yesterday I installed shorewall, based on the debian package from www.backports.org (which seems to be a 2.0.3 package) on an otherwise virgin debian woody set up. Configuration was done based on the two-interface setup. Kernel is 2.6.8.1 unpatched. A 2.4.23 kernel, with

[ sorry for cross-posting this to newbies and users, but I''m a bit desperate to get this resolved ] This is strange... I had this working before without any problems, and recently we started to have some odd issues. I can''t be sure exactly what has changed as I''m unfortunately not the only person with access to the server. {sigh} The problem is that I pretty much

Has anyone successfully setup a shorewall Ucarp solution?

Hello, We are using shorewall-3.0.7-1, I was tried the video conference server doesn''t via shorewall that was no problem, can I upgrade shorewall version to fix this problem ? our boss need use video conference this few days, so this is emergency. Thx ~~ --------------------------------- Yahoo! 網上安全攻略，教你如何防範黑客! 了解更多

Shoot! Sorry Tom. I thought I replaced your e-mail address with the shorewall list address. I got it working!!! I finally figured out what I was doing wrong. Pays to write down what I want to accomplish versus flying by the seat mof my pants. The ACCEPT+ is G R E A T! Took care of some of my issues along with removing the redirect rule (yeah, yeah...I should have thought it over more

I just installed Fedora Core 3 uname -r 2.6.9-1.667 I got the latest shorewall''s rpm: http://www.shorewall.net/pub/shorewall/2.2/shorewall-2.2.0/shorewall-2.2.0-1 .noarch.rpm Made my changes Attempted to run shorewall and got: [root@demo shorewall]# shorewall start ERROR: Can''t find iptables executable I haven''t seen this before. I tried to go through all the

Having moved from a "cascading LANs" configuration to two independent LANs on eth0 and eth1, I still get some "state INVALID" for which I am not sure what the cause is. Can somebody help me understand its probable origin? Thanks, Costantino [see attachment]